Motorsports Association
AMBolton ParkPractice 1--D--H--M

Privacy policy

Last updated 27 September 2026

This policy explains what the Motorsports Association (“MSA”, “we”) website collects when you visit it or sign in with Roblox, why, and what you can do about it. The site is run by SB Group on behalf of MSA. We follow UK data protection law (the UK GDPR and the Data Protection Act 2018).

If you only browse

You can read the schedule, results, standings, team and driver pages and announcements without an account. We don’t use advertising, analytics or tracking cookies. Our hosting providers keep short-lived server logs (such as IP address and the page requested) to run and protect the service.

If you choose “My time” or “Track time”, that choice is saved in your own browser’s local storage. It is never sent to us.

If you sign in with Roblox

Signing in uses Roblox’s official sign-in. With your approval, Roblox sends us your public profile:

  • your Roblox user ID, username and display name;
  • the address of your Roblox headshot image.

We never see your Roblox password, email address or payment details, and we can’t act on your Roblox account.

While you are signed in we also store:

  • a sign-in session: a random token kept in a secure, HTTP-only cookie. We store only a scrambled (hashed) copy of it, with the time it was created and last used and your browser’s user-agent;
  • a one-way hash of your IP address, used only to limit repeated sign-in attempts and form submissions. It can’t be turned back into your IP address.

What drivers and team principals add

If you are an MSA driver or team principal, you can add or change things that appear publicly on the site:

  • for drivers: your profile bio, country, links, and images;
  • for team principals: your team’s information and driver line-up.

Incident reports you send to the stewards are seen only by you and MSA staff. We keep a record of changes (who changed what, and when) to protect the integrity of the championship.

Race results are a public record

Results, standings and line-ups are published because they are the purpose of the championship. We keep them as part of the historical record even after a driver leaves or deletes their account. When you delete your account we remove the link between your Roblox account and your driver record, and delete your sign-in data.

Why we use your data

  • To let you sign in and manage what is yours (performing the service you asked for).
  • To run the championship and publish its record, and to keep the site secure and prevent abuse (our legitimate interests).

Where it is stored and who processes it

The site is hosted by Vercel. Data is stored in a Supabase database in the European Union (Stockholm, Sweden). Images are served from Roblox’s image servers and from our storage at Supabase. We don’t sell your data or share it with anyone else.

How long we keep it

  • Sign-in sessions end after 14 days without use, or 60 days at most, and are deleted a week after that.
  • Rate-limit records are deleted after two days.
  • Your account is kept until you delete it.
  • Results and the change record are kept as part of the championship’s history.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. When signed in, you can download your data and delete your account yourself from your account page. For anything else, contact the MSA team through the official MSA Discord server. You can also complain to the UK Information Commissioner’s Office (ico.org.uk).

Younger players

Many Roblox players are young. If you are under 13, please ask a parent or guardian before signing in. A parent can ask us to delete a child’s account at any time.

Changes

If we change this policy we will update the date at the top of the page and, for significant changes, post an announcement.